![\"Expert](\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/05\/World-Password-Day-mod.jpg\")
<\/p>\n<\/p>\n
Today, May 2, 2019, is World Password Day! This represents an excellent opportunity to assess your identity security policies and consider whether you need an access management upgrade. <\/span><\/p>\n After all, passwords<\/a> prove largely inadequate for protecting users against threat actors internal or external. Generally, hackers can use social media or public information to guess most users\u2019 passwords. Otherwise, they can purchase and employ tools to crack the passwords in a matter of days if not hours.<\/span><\/p>\n Furthermore, users often utilize well-known weak passwords or to repeat their passwords across multiple accounts. Both practices play right into hackers\u2019 hands. <\/span><\/p>\n Thus on World Password Day, we wanted to assess the actual state of enterprise identity and access management<\/a>. What can enterprises do to improve their password security? Which strategies prove most effective against password guessing or cracking? What does the future hold for authentication? <\/span><\/p>\n To answer these questions, we compiled expert commentary from throughout the IAM space<\/a>. Here\u2019s what the professionals had to say on World Password Day:<\/span><\/p>\n Identity and access management solution provider <\/span>OneLogin<\/span><\/a> today released a study of 300 IT decision makers throughout the United States. What they found puts World Password Day 2019 into context. <\/span><\/p>\n Indeed, OneLogin discovered 44% of enterprises take up to a month or more to deprovision former employees. Additionally: <\/span><\/p>\n \u201cThe current digital sprawl not only makes it tough to manage our passwords, but it also leads to bad habits that can cause data breaches. Using the same password on multiple sites, easily guessed passwords, and passwords with patterns that change based on the site\u2014can all lead to account takeover and data theft.<\/span><\/p>\n \u201cTechnologies like two-factor authentication, continuous authentication tools, and risk engines that look for suspicious behavior before granting access, all allow companies to limit or remove passwords from the regular user workflow. This not only improves the user experience but can also be a net gain to security when done correctly. Companies that jump on this trend will be the ones with the most seamless customer experience.\u201d \u00a0<\/span><\/p>\n \u201cEach World Password Day reminds us how important the password remains to online authentication. And it also highlights how the password has become a weak link. According to <\/span>research<\/span><\/a>, 63 percent of data breaches are linked back to weak, reused, or stolen passwords. Compromised credentials lead to highly lucrative and devastating attacks.<\/span><\/p>\n \u201cWe have made passwords more and more complex so they cannot be easily guessed by bad actors. Unfortunately, this is also one of their biggest drawbacks. The forgetting and resetting of dozens of passwords is a broken cycle that we should strive to end.<\/span><\/p>\n \u201cWe\u2019ve reached a breaking point, and the power of the password is rapidly diminishing.<\/span><\/p>\n \u201cSome are turning to biometrics as the answer to get around passwords altogether. And while biometrics technology is well on its way to being the authentication approach of the future, there are still shortcomings, such as not being able to update or create a new biometric login when fingerprint data is stolen from a leaked database. As biometrics emerges for today\u2019s businesses, there is another recommended approach for authentication, which is multifactor<\/a>.<\/span><\/p>\n \u201cLayering security through a multi-factor process does authentication right. And the good news is that as biometrics evolves, it can serve as a portion of the multi-factor authentication process. While it is World Password Day, one can see a transformation in authentication that could ultimately move us away from the password. One day, we might have to call it World Authentication Day.\u201d<\/span><\/p>\n \u201cWhile we’re all drowning in passwords, they’re what we still trust to give and get access – and for now, they’re here to stay. Given the lengths to which people will go in order to get their hands on them, we really should be doing as much as possible to keep them safe and secure. For organizations, this means having a centralized security policy and effective encryption key management to assure control of data across every physical and virtual server on and off your premises.\u201d<\/span><\/p>\n \u201cWe hope to live in a password-less world, one day. Until then, protect yourself with a few good habits:<\/span><\/p>\n \u201cDo not use the same password across multiple sites.<\/span><\/p>\n Use biometric authentication on mobile phone apps<\/span><\/p>\n Use at least two online password managers to securely save and sync your credentials<\/span><\/p>\n Change passwords on finance and healthcare related applications on a regular basis.\u201d<\/span><\/p>\n \u201cEarlier this month the National Cyber Security Centre released a list of the most common passwords. This included 3.6 million people using \u2018password\u2019 and 23.2 million with \u2018123456\u2019 as a means of security. Despite organizations trying to impose stronger password requirements and striking awareness campaigns, clearly the message is not getting through. What\u2019s more, the first computer passwords were first introduced in the 1960s. Yet half a century later the technology has moved on very little and isn\u2019t doing a particularly good job at keeping information secure. This is why organizations need to take more responsibility and why additional layers of security, beyond the password, are so important.<\/span><\/p>\n \u201cIt would be foolish to suggest that passwords are completely redundant, they will always have a place in the authentication process, however, organizations are now able to draw on more reliable and intelligent data points in order to identify people. Now they aren\u2019t restricted to one or two authentication methods but can offer their customers a choice in how they want to authenticate themselves. By giving them this choice, those who haven\u2019t created a secure password will have alternative measures in place to make sure their data won\u2019t be compromised.\u201d<\/span><\/p>\n “World Password Day was originally introduced to raise awareness of the importance of creating strong passwords\u2014so that worked! However, with the sheer volume of data breaches where users\u2019 passwords are stolen and sold on the Dark Web, the issue is less about creating strong passwords or phrases and more about educating people of the need for a unique code for each online account.<\/span><\/p>\n “Considering millions are still using<\/span> 123456 as a password<\/span><\/a>, the chances of changing password behavior is nothing short of a miracle. Instead, I advocate the use of password managers that create and store complex passwords, with some capable of alerting users when compromised passwords are found in data breaches. So on World Password Day, instead of improving your complex recipes for password success, do yourself a favor and automate.”<\/span><\/p>\n Thank you to these cybersecurity experts and professionals for sharing their thoughts and concerns with us on World Password Day! <\/span><\/p>\n If you would like to learn more about password security and identity management, check out our Free 2019 Buyers\u2019 Guides. Additionally, you should consider registering for <\/span>Identiverse 2019<\/span><\/a>. You can use the discount code \u201cREGISTERNOW19\u201d through May 31 to get $250 off. Check it out <\/span>here<\/span><\/a>.\u00a0<\/span><\/p>\n Today, May 2, 2019, is World Password Day! This represents an excellent opportunity to assess your identity security policies and consider whether you need an access management upgrade. After all, passwords prove largely inadequate for protecting users against threat actors internal or external. Generally, hackers can use social media or public information to guess most […]<\/p>\n","protected":false},"author":41,"featured_media":4383,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5],"tags":[142,125,237,836,1140,16,112,76,70,118,145,1141,30,473,254,124,91,123,63,90,25,1139,1138],"acf":[],"yoast_head":"\n\t\t\t![\"Download](\"https:\/\/solutionsreview.com\/identity-management\/files\/2020\/01\/PAM_BG_SB_800.gif\" "\\"\\"")
<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\nWorld Password Day in Context<\/b><\/h2>\n
\n
Robb Reck, CISO at <\/b>Ping Identity<\/b><\/a><\/span><\/h3>\n
George Cerbone, Principal Architect at <\/b>One Identity<\/b><\/a><\/span><\/h3>\n
Peter Galvin, Chief Security Officer at<\/b> nCipher<\/b><\/a><\/span><\/h3>\n
Ameya Talwalkar, Co-Founder and CPO at <\/b>Cequence Security<\/b><\/a><\/span><\/h3>\n
Sarah Whipp, CMO and Head of GTM Strategy at<\/b>\u00a0Callsign<\/b><\/a><\/span><\/h3>\n
Gavin Millard, VP of Intelligence at <\/b>Tenable<\/b><\/a><\/span><\/h3>\n
<\/div>\n
Widget not in any sidebars
\n","protected":false},"excerpt":{"rendered":"